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MEMORANDUM 


July 21, 1983 
Tox Employees, NTL and subsidiaries 
From: E.B. Fitzgerald 


Subject: Information Security Program 


One of our corporation's most important assets is its 
proprietary information. This information is 
corporate property which we have developed or acquired 
at great expense (e.g. our R&D budget over the last 
decade totalled over $1 billion). The loss of such 
vital proprietarv information can result in 
irreparable harm to both our business and to our 
futures as employees. The protection of proprietary 
information is, therefore, an important corporate and 
personal objective -- it is our future at stake. 


This handbook describes our ongoing Information 
Security Program. It explains the rules governing the 
handling of information. As ycu follow them, you will 
ensure the success of our information protection 
program. I suggest you read the first section in its 
entirety before turning to the sections which apply to 
you specifically. 


Information security is a continuing process. Any 
suggestions you may have for improving this handbook 
will be welcomed. Contact your security manager. 


Luu Fl 


Edmund 8. Fitzgerald 
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SECTION ONE - INFORMATION SECURITY L 


POLICY 


««. the corporation shall constantly maintain and improve 
its capability to anticipate and respond to situations which 
threaten its resources ... 


The corporation's security program must have the support of 
all its officers, managers, and employees ...". 


- Corporate Policy No. 100.06. 


NORTHERN TELECOM'S INFORMATION SECURITY PROGRAM 


Northern Telecom's Information Security Program applies to 
Northern Telecom Limited and all its subsidiaries. It has 
the following objectives: 

° increased employee awareness and education 

stricter enforcement of information handling practices 


Q 


improved computer and telecommunications security. 


Information security consists of: 


classification 
control of disclosure 
minimizing loss 
security audits. 


2 


SECTION ONE - INFORMATION SECURITY 


CLASSIFICATION 


PROPRIETARY INFORMATION 


There are many types of proprietary information such as: 


personnel 

scientific or technical 
° business plans 
financial 

° marketing 

fManufacturing 

° software 


new product plans. 


Northern Telecom classifies its most important proprietary 
information as: 


° NORTHERN TELECOM PRIVATE 
° NORTHERN TELECOM RESTRICTED. 


NORTHERN TELECOM PRIVATE INFORMATION 


NORTHERN TELECOM PRIVATE is proprietary information 


vital to the conduct of Northern Telecom's business, the 


disclosure of which could prevent the reaching of major 
objectives, result in substantial financial loss, be of 
Significant benefit to competitors, or be detrimental to the 
reputation of Northern Telecom. 
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NORTHERN TELECOM RESTRICTED INFORMATION 


NORTHERN TELECOM RESTRICTED is proprietary information 
important to the conduct of Northern Telecom's business, the 
disclosure of which could result in loss of a trade secret, 


or in some other way be detrimental to Northern Telecom. 


A trade secret may consist of any formula, pattern, device 

or compilation of information which is used in one's business 
and which gives him an opportunity to obtain an advantage 
over competitors who do not know or use it. It may be a 
formula for a chemical compound, a process of manufacturing, 
treating, or preserving materials, a pattern for a machine or 
other device, or a list of customers. 


CLASSIFIED PROPRIETARY INFORMATION 
Classified proprietary information is proprietary 


information which has been classified as either NORTHERN 
TELECOM PRIVATE or NORTHERN TELECOM RESTRICTED. 


UNCLASSIFIED PROPRIETARY INFORMATION 


Unclassified proprietary information is proprietary 
information which has not been classified as either 
NORTHERN TELECOM PRIVATE or NORTHERN TELECOM 
RESTRICTED. 


PUBLIC INFORMATION 


Information in the public domain is proprietary 
information which has been made available to the public. 


() 


() 
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SECTION ONE - INFORMATION SECURITY 4 


CONTROL OF DISCLOSURE 


GUIDELINES 


This handbook describes which classifications of proprietary 
information you may disclose to: 


° other Northern Telecom employees 

parties with whom Northern Telecom contracts 
° governments 

others. 


It sets out the procedures you must follow before you make 
such disclosure. 


EMPLOYEES 


Disclose proprietary information only to those employees 
with a need to know such information for the purpose of doing 
their jobs. 


Do not disclose classified proprietary information to 
temporary employees. 


CONTRACTING PARTIES 


Do not disclose proprietary information to a party with 

whom Northern Telecom contracts unless, prior to disclosure, 

the party signs a non-disclosure agreement; the agreement is 

satisfactory in form and content to Northern Telecom; and the 
Originator of the classification approves the disclosure. 
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GOVERNMENTS 


Do not disclose proprietary information to governments, 
without markings that ensure the maximum protection under 
Freedom of Information or Access to Information legislation. 


The originator of the classification must approve the 
disclosure. 


OTHERS 


Do not disclose classified proprietary information to 
others with the exception of the Board of Directors of the 
corporation, 


Do not disclose unclassified proprietary information to 
others without proper prior approval. 


MINIMIZING LOSS 


If you lose or misplace documents containing classified 
proprietary information, immediately report the loss to 
your manager, to the originator of the classification, and to 


your security manager. 


If you become aware that there has been unauthorized dis- 
closure of classified proprietary information, report 
this to your manager, to the originator of the classifica- 


tion, and to your security manager, 


SECTION ONE - INFORMATION SECURITY 


SECURITY AUDITS 


Internal auditors and security personnel will periodically 


conduct audits to ensure compliance with this handbook. 
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NOTES 


SECTION TWO - OFFICERS 


TABLE OF CONTENTS 


1.0 CLASSIFICATION 


1.1 INITIAL CLASSIFICATION 
REGISTRATION 
UPGRADING 


1.4 DOWNGRADING AND DECLASSIFICATION 


2.0 RESPONSIBILITY AS MANAGER 


Ww nN FF 


SECTION TWO - OFFICERS 


CLASSIFICATION 


INITIAL CLASSIFICATION 


As a legally designated officer, you are responsible for 
proprietary information and are authorized to classify 
proprietary information as NORTHERN TELECOM PRIVATE 

Or NORTHERN TELECOM RESTRICTED. 


You may delegate this responsibility and authority to a 
subordinate. For NORTHERN TELECOM PRIVATE information, 

do not delegate to a subordinate with less than Level 4 
approval authority. To do this, issue a delegation of 
authority, form 72-102, to the subordinate and provide your 
security manager with a copy of the form. Review and cancel 
or approve this delegated authority at least annually. 


If you are classifying a multi-page document which contains 
some information which you classify as NORTHERN TELECOM 
PRIVATE or NORTHERN TELECOM RESTRICTED, the whole 

document will have the higher level of classification. 


I£ you take an excerpt of classified proprietary 
information from one document for inclusion in another, the 


whole document will have the higher level of classification. 


REGISTRATION 


You must ensure that a register is kept of all 
information which you classify as NORTHERN TELECOM 
PRIVATE. SECTION SIX, SAMPLE FORMS, contains a sample 
register page. 
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SECTION TWO — OFFICERS 3 


DOWNGRADING AND DECLASSIFICATION 


If you classify information as NORTHERN TELECOM PRIVATE 
and subsequently decide the appropriate classification is 
NORTHERN TELECOM RESTRICTED: 


reclassify the document 


immediately advise all recipients of the information of the 
changed classification 


ensure that new security cover sheets and instructions are 
distributed to all recipients of the information, and 


ensure that your copy of the document bears the new 
security cover sheet and the markings applicable to the 
downgraded classification. 


Downgrade or declassify NORTHERN TELECOM-PRIVATE informa- 
tion in the register. The register should contain 

the date when the issue of downgrading or declassification 
was brought to your attention for review. 


_ Review information which you have classified as NORTHERN 


TELECOM PRIVATE and NORTHERN TELECOM RESTRICTED from 

time to time to decide if downgrading or declassification is 
appropriate. If so, follow instructions above for downgrad- 
ing and declassification. 


If you receive NORTHERN TELECOM PRIVATE information which 
you believe should be NORTHERN TELECOM RESTRICTED, immed-— 
iately advise the originator of the classification. Confirm 


these communications in writing. 


SECTION TWO -— OFFICERS 


RESPONSIBILITY AS A MANAGER 


As a Manager you should also be familiar with SECTION THREE, 
Part 2.0 of this handbook. 


SECTION TWO — OFFICERS NOTES 
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SECTION THREE - MANAGERS 1 


CLASSIFICATION 


INITIAL CLASSIFICATION 


AS a Manager, you are responsible for proprietary information 
and have the authority tos: 


classify proprietary information as NORTHERN TELECOM 
RESTRICTED if the category is applicable to the informa- 
tion 


° classify proprietary information as NORTHERN TELECOM 
PRIVATE if an officer in jurisdiction has delegated such 
authority to you. Delegation is restricted to managers 
with Level 4 or higher approval authority. This delegation 
will be authorized on delegation of authority form 72-102. 


Classification of proprietary information as NORTHERN 
TELECOM PRIVATE is detailed in SECTION TWO, Part 1.1, 
INITIAL CLASSIFICATION. 


If you are classifying a multi-page document which contains 
some information which requires classification as NORTHERN 
TELECOM PRIVATE or NORTHERN TELECOM RESTRICTED, the 


whole document will have the higher level of classification. 


If you take an excerpt of classified proprietary informa- 
tion from one document for inclusion in another, the whole 
document will have the higher level of classification. 


SECTION THREE - MANAGERS 2 


REGISTRATION 


You must ensure that a register is kept of all informa- 

tion which you classify as NORTHERN TELECOM PRIVATE. 

SECTION SIX, SAMPLE FORMS, contains a sample register 

page. This register must contain details of NORTHERN 
TELECOM PRIVATE information eg. origin, date of classifica- 
tion, reclassification, or destruction, date of receipt, etc. 
see SECTION FIVE, Part 1.3, REGISTRATION. 


UPGRADING 


If you classify information NORTHERN TELECOM RESTRICTED 

and subsequently decide that the appropriate classification 
is NORTHERN TELECOM PRIVATE, you must bring the matter to 
the attention of the officer responsible as soon as possible. 
If you have a delegation of authority: 


reclassify the document 


immediately advise all recipients of the information of the 
changed classification 


ensure that new security cover sheets and instructions 


applicable to the upgraded classification are distributed 
to all recipients of the information 


ensure that your copy of the document bears the new 
security cover sheet and the markings applicable to the 
upgraded classification 


° enter NORTHERN TELECOM PRIVATE information in the 
register. 


SECTION THREE — MANAGERS 3 


If you receive NORTHERN TELECOM RESTRICTED information 
which you believe should be NORTHERN TELECOM PRIVATE, 
immediately advise the originator of the classification and 
your security manager. Confirm these communications in 
writing. 


When you receive a new security cover sheet and instructions 
indicating an upgraded classification, immediately remove the 
original cover sheet and replace it with the new one. Enter 


NORTHERN TELECOM PRIVATE information in your register. 


DOWNGRADING AND DECLASSIFICATION 


If you classify information as NORTHERN TELECOM PRIVATE 
and subsequently decide the appropriate classification is 
NORTHERN TELECOM RESTRICTED: 


° reclassify the document 


immediately advise all recipients of the information of the 


changed classification 


ensure that new security cover sheets and instructions are 
distributed to all recipients of the information, and 


ensure that your copy of the document bears the markings 


applicable to the downgraded classification. 


Downgrade or declassify NORTHERN TELECOM PRIVATE 
information in the register. The register should 
contain the date when the issue of downgrading or 
declassification was brought .to your attention for review. 


() 
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2.1.1 


SECTION THREE - MANAGERS 


Review periodically information which you have classified as 
NORTHERN TELECOM PRIVATE or NORTHERN TELECOM 
RESTRICTED from time to time to decide if downgrading or 


declassification is appropriate. If so, follow instructions 
above for downgrading and declassification. 


If you receive NORTHERN TELECOM PRIVATE information which 
you believe should be classified NORTHERN TELECOM 
RESTRICTED, immediately advise the originator and your 


security manager. Confirm these communications in writing. 


CONTROL OF DISCLOSURE 


GENERAL REMINDERS 


Clean Desk Policy 


The corporation subscribes to a clean desk policy. At the 
end of the day, clear all classified proprietary informa- 
tion from your desk, table, credenza, etc. and lock it 

up. 
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2.1.2 Loose Talk 


It is very human to discuss one's work with others. The 
problem is to know when to stop short of unauthorized 
disclosure of proprietary information. If you work with 
proprietary information, be sensitive to the things you 

say in public places. Industrial espionage agents rely 
heavily on the fact that people love to talk about their work 
- in elevators, lunchrooms, restaurants, airplanes, buses, 


trains, at social events, sporting events, etc. 


Disclose travel plans and work calendars only to those who 
need to know the information. Confirm travel arrangements as 


close to the date of departure as practical. 
2.1.3 Classified Document Custodian 


Appoint a person in your department as classified document 
custodian. This person will be responsible for safeguard- 
ing, handling, and controlling classified proprietary 
information. See SECTION FIVE, Part 1.2, CLASSIFIED 
DOCUMENT CUSTODIAN. 


2.1.4 Removal from Premises 


Do not remove or permit the removal of NORTHERN TELECOM 
PRIVATE information from company premises except in 
emergencies or when there is no alternative. If you must 
remove such information, get approval from your department 


manager and have your register annotated accordingly. 


Leave a detailed receipt with the classified document 
custodian. This will be returned to you when you return 
the document or otherwise account for it. 


( ) 


SECTION THREE ~ MANAGERS 


Give this proprietary information the same degree of 
protection when it is off company premises as it is given 
while on company premises. While travelling, for example, 
this might mean carrying the document with you at all times 
Or depositing it in a hotel safe. 


Do not remove NORTHERN TELECOM RESTRICTED information 
from company premises unless there is a definite need. 


Giving such a document the same protection as it has on 
company premises might, for example, mean locking it in your 


desk at home or keeping it on your person while travelling. 


2e1.5 Transmission 


Remember that telephones, TWX, telex, telecopiers, and 
communicating word processors are not always secure means of 
communication. Do not use these to transmit classified 
proprietary information, unless the use of this equipment 


has been cleared through your security manager. 


A secure transmission network links certain Northern Telecom 
locations in North America and elsewhere. Contact your 
security manager for details. 


Obtain positive identification of the caller, before 
disclosing proprietary information over the telephone. 


2.1.6 Conference Phone Calls 
Remember that conference phone calls can be sources of 


information leaks. Audio and voice volume should be 
controlled to a level that will eliminate disclosure. 


SECTION THREE - MANAGERS 


Data Password Protection 


Passwords are used to control access to computer based data 
e.g. distributed data and word processing terminals, 
Displayphones, etc. Access to these systems should be on a 


need-to~-know basis. 


Passwords should be kept secret and changed frequently 
should not be obvious, such as locations, department names, 
phone numbers, etc. 


If an employee is reassigned, transferred or terminated, it 


is the manager's responsibility to cancel the need-to-know 


authorization and the password. 


CONTROL OF DISCLOSURE TO OTHER EMPLOYEES 


2.2.1 Distribution 


° Extent of Distribution 


Determine, prior to distribution, to whom you will distri- 
bute NORTHERN TELECOM PRIVATE or NORTHERN TELECOM 
RESTRICTED information. Distribute only to those who 


need to know the information in order to do their jobs. 


° Preparation for Distribution 


Ensure that classified proprietary information is 
prepared for distribution with the appropriate security 
cover sheets, markings, and packaging. See SECTION FIVE, 
Part 3.0,PREPARATION FOR DISTRIBUTION. 


Ld 
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SECTION THREE - MANAGERS 8 


° Method of Distribution 


Approved methods of distribution of classified proprie- 
tary information are outlined in SECTION FIVE, Part 2.2, 
DISCLOSURE TO OTHER EMPLOYEES. 


Due to the importance of classified proprietary inform- 
ation, it is a good practice to follow up the distribu- 
tion of such information to see if it has arrived at the 
destination(s) within a reasonable time period. See SECT- 
ION ONE, Part 5.0, MINIMIZING LOSS. 


The use of taxis for transmittal of proprietary inform- 
ation material is not recommended. However, taxis may be 
used when no other alternative means of transportation is 
available. 


In these instances, it will be your responsibility to 
verify that the material is received promptly and intact by 
the recipient at the destination. 


° Updating the Register 


If you classify proprietary information NORTHERN 

TELECOM PRIVATE, ensure that the register for such 
information contains the names of the employees to whom the 
information was distributed, their department and location 


number, and the date of distribution. 
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° Prohibitions 


Do not disclose to other permanent employees classified 
proprietary information which you did not classify, 
even if the classification was done by a subordinate who 


reports to you directly or indirectly. 


Do not disclose classified proprietary information to 
temporary employees. 


Do not disclose unclassified proprietary information 
except to those employees with a need to know such 
information in order to do their jobs. 


° Need-to-Know List 


Maintain an up-to-date list of permanent employees 
(internal and external to your department) with need-to- 
know access to specific proprietary information. 

Give this list to your classified document custodian, 

who will use it to control the distribution and disclosure 


of the information. 
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Qo 


° 


Meetings, Conferences, and Seminars 


If you are acting as a chairperson at a meeting, 
conference, or seminar where classified proprietary 
information will be discussed, inform the participants at 
the beginning of the meeting of the classification of the 
meeting, conference, or seminar. All participants will 
sign a registration log which you will keep as part of the 
meeting records. All materials distributed must bear the 
appropriate security cover sheet and markings. If the 
information is NORTHERN TELECOM PRIVATE, you must 

ensure that the relevant details about its distribution are 
recorded in the register. 


Off-site Meetings, Conferences, etc. 


If you are a principal in convening a company meeting to be 
held at a location other than the corporation's and 
classified proprietary information may be discussed, 

ensure that the off-site facility and security provisions 
are approved, in advance, by the local security manager. 


Reproduction 


Do not reproduce classified proprietary information. 


Should you require additional copies, obtain these from the 


originator of the classification. 
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2.2.3 Storage 


Store NORTHERN TELECOM PRIVATE information in a steel 

filing cabinet with welded seams and equipped with a steel 
locking bar and an Abloy, model 3041 key-type padlock. Store 
NORTHERN TELECOM RESTRICTED information in a locked 


container such as a desk drawer, filing cabinet, etc. 


Strictly control access to keys. Grant access to the keys 
only to the classified document custodian and an absolute 
minimum number of employees who have a need to know the 
information. 


Keys providing access to classified proprietary 

information should be stored in a steel filing cabinet with 
welded seams and equipped with a steel locking bar and an 
Abloy, model 3041 key-type padlock. The key for this key 
storage cabinet should be retained on one's person. 


Lock your office door during coffee breaks, lunch break, or 
other short absences. Remember that locking your door does 


not constitute adequate security during nonworking hours. 


2.2.4 Contingency Storage 


Ensure that a back-up, contingency file of classified 
proprietary information is stored at an approved off-site 
location. 


It is not necessary to duplicate all classified proprietary 
information if access to other copies of this information 
can be assured. 
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SECTION THREE - MANAGERS 


Destruction 


Once you declassify NORTHERN TELECOM PRIVATE or 
NORTHERN TELECOM RESTRICTED information, retain or 
destroy it, depending on its continuing value to the 
corporation's business; destroy by shredding or burning. 
Record the destruction of NORTHERN TELECOM PRIVATE 
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information in all registers. The security cover sheet is to 


be filed in the register for audit purposes. 


CONTROL OF DISCLOSURE TO CONTRACTING PARTIES 


Do not disclose classified proprietary information to a 
party with whom Northern Telecom contracts without: 


the approval of the originator of the classification, and 


the signing of a non-disclosure agreement by the 
contracting party prior to disclosure. This agreement 
shall be equivalent in form and content to the example in 
SECTION SIX. 


Do not disclose unclassified proprietary information to a 
contracting party without: 


° the approval of the department manager who has jurisdiction 


over the type of information to be disclosed. 


the signing of a non-disclosure agreement by the contract-— 
ing party, prior to disclosure. The agreement shall be 
equivalent in form and content to the example in SECTION 
SIX. 
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CONTROL OF DISCLOSURE TO GOVERNMENTS 


Do not disclose classified proprietary information to a 
government without the prior approval of the originator of 
the classification. Governments do not recognize the cate- 
gories NORTHERN TELECOM PRIVATE and NORTHERN TELECOM 
RESTRICTED; therefore, prior to disclosure to the govern- 
ment, mark such information in such a way as to ensure maxi- 
mum protection under Freedom of Information or Access to 
Information legislation. See SECTION SIX, Sample Forms, for 
Stamp Specimens. Contact the Northern Telecom Law Department 


for assistance. 


Treat unclassified proprietary information in the same 

way as classified proprietary information, but obtain 
approval, prior to disclosure, from the department which has 
functional jurisdiction over the type of information to be 
disclosed. 


CONTROL OF DISCLOSURE TO OTHERS 


2.5.1 General Rules 


Channel any disclosure of classified proprietary informa- 


tion to the Board of Directors of the corporation through 
the corporate secretary. 


Do not disclose classified proprietary information to 
others. 


Do not disclose unclassified proprietary information to 
others without prior approval From the department which has 
Eunctional jurisdiction over the type of information to be 
disclosed. 


~~ 
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2.5.2 The External News Media 


Should you be contacted by letter, telephone, or in person by 
anyone seeking information about Northern Telecom, refer the 
person to your senior manager who will request assistance 


from the corporate or public relations department. 
2.5.3 Northern Telecom Internal Publications 


Respond to requests from company publications for proprie- 
tary information under the rules applicable to disclosure 


to others, as in SECTION THREE, Subsection 2.5.1. 


2.5.4 Papers (Articles, Technical Papers, Written Speeches) 


Do not disclose any classified proprietary information in 
any article, paper, or speech. 


You may disclose unclassified proprietary information in 

a paper provided that you obtain in writing, prior to disclo- 
sure, the approval of your immediate manager. Submit to your 
immediate manager, at least six weeks in advance of the date 
of the proposed release, a copy of the paper and a written 
memorandum containing the following information: 


° an outline of the presentation 
° the date of the presentation 


° the name of the publication or nature of the audience 


If you are an approving manager: 


° verify the accuracy of the facts in the paper 
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° verify whether or not classified proprietary information 
is included and follow the rules in SECTION THREE, Part 
222) Die ds 


° determine whether another function or division has an 
interest in the subject matter and if so, obtain the 
approval of the vice-president or general manager in 
jurisdiction. For example, if the paper contains technical 
detail or process information, obtain the approval of the 


patent department in Mississauga 
° obtain the approval of the vice-president, public rela- 


tions, or senior vice-president, corporate relations, as 


the case may be 
° advise the subordinate in writing of your decision. 


Once a paper has been approved, do not make changes without 
submitting them for approval, as above. 


If a paper is approved for oral presentation only, do not 


distribute copies outside the corporation, 


2.5.5 Panel Discussions and Informal Speeches 


Do not disclose any classified proprietary information in 
a panel discussion or informal, unwritten speech. 
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At least six weeks prior to participation in a panel discuss~ 
ion, or prior to giving a speech as a Northern Telecom 
employee, obtain approval in writing from your immediate 
Manager. Submit to your immediate manager a written 
memorandum with following information: 


° an outline of the discussion or speech 


° 


the date of the presentation 
the nature of the audience. 


oO 
If you are an approving manager: 

verify the accuracy of the facts in the paper 

obtain approval for the disclosure of unclassified 
proprietary information, from the department which has 
jurisdiction over the information 

obtain the approval of the vice-president, public rela- 
tions, or senior vice-president, corporate relations, as 


the case may be 


advise the subordinate in writing of such approval. 
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SECTION FOUR ~ PROFESSIONALS, INCLUDING SPECIALISTS 


CLASSIFICATION 
INITIAL CLASSIFICATION 


As a professional (scientist, engineer, or managment special- 


ist), you are responsible for proprietary information and 
have the authority to classify proprietary information as 
NORTHERN TELECOM RESTRICTED if the category is applicable 


to the information. 


Classification of proprietary information as NORTHERN 
TELECOM PRIVATE is the responsibility of an officer. See 
SECTION TWO, Part 1.1, INITIAL CLASSIFICATION. 


If you are classifying a multi-page document which contains 
some information which requires classification as NORTHERN 
TELECOM PRIVATE or NORTHERN TELECOM RESTRICTED, the 


whole document will have the higher level of classification. 


If you take an excerpt of classified proprietary informa- 
tion from one document for inclusion in another, the whole 
new document will have the higher level of classification. 


REGISTRATION 


A register must be kept for proprietary information 
classified as NORTHERN TELECOM PRIVATE. Obtain details 
from your manager. 
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UPGRADING 


If you classify information NORTHERN TELECOM RESTRICTED 

and subsequently decide that the appropriate classification 
is NORTHERN TELECOM PRIVATE, you must bring the matter to 
the attention of your manager and your security manager as 


soon as possible. 


If you receive NORTHERN TELECOM RESTRICTED information 
which you believe should be NORTHERN TELECOM PRIVATE, 
immediately advise the originator of the classification and 
your security manager. Confirm these communications in 
writing. 


When you receive a new security cover sheet and instructions 
indicating an upgraded classification, immediately remove the 
original security cover sheet and replace it with the new 
One. Ensure that details of NORTHERN TELECOM PRIVATE 
information is entered in your department's register. 


DOWNGRADING AND DECLASSIFICATION 


If you classify information as NORTHERN TELECOM RESTRICTED 
and subsequently decide the classification is NOT APPLICABLE: 


° declassify the document 


° immediately advise all recipients of the changed classifi- 


cation 
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Review periodically information which you have classified as 
NORTHERN TELECOM RESTRICTED to decide if declassification 


is appropriate. If so, follow instructions above for 
declassification. 


If you receive NORTHERN TELECOM PRIVATE information which 
you believe should be classified as NORTHERN TELECOM RES- 
TRICTED immediately advise the originator of the classifi- 
cation and your security manager. Confirm these 


communications in writing. 


CONTROL OF DISCLOSURE 


GENERAL REMINDERS 


Clean Desk Policy 


The corporation subscribes to a clean desk policy. At the 
end of the day, clear all classified proprietary informa- 
tion from your desk, table, credenza, etc. and lock it 

up. 


Loose Talk 


It is very human to discuss one's work with others. The pro- 
blem is to know when to stop short of unauthorized disclosure 
of proprietary information. If you work with propri- 

etary information, be sensitive to the things you say in 
public places. Industrial espionage agents rely heavily on 
the fact that people love to talk about their work - in 
elevators, lunchrooms, restaurants, airplanes, buses, trains, 


at social events, sporting events, etc, 
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Disclose travel plans and work calendars only to those who 
need to know the information. Confirm travel arrangements as 


close to the date of departure as practical. 


2.1.3 Classified Document Custodian 


A person in your department will be designated, by the man- 
ager, as classified document custodian. This person will 
be responsible for safeguarding, handling, and controlling 
classified proprietary information. 


2.1.4 Removal From Premises 


Do not remove NORTHERN TELECOM PRIVATE information from 
company premises except in emergencies or when there is no 
alternative. If you must remove such information, get 
approval from your department manager and make sure the 
register of Northern Telecom Private Information is 
annotated accordingly. 


Leave a detailed receipt with the classified document cust- 
odian. This will be returned to you when you return the 


document or otherwise account for it. 


Give this proprietary information the same degree of protec- 
tion when it is off company premises that it is given while 
On company premises. While travelling, for example, this 
might mean carrying the document with you at all times or de- 


positing it in a hotel safe. 


Do not remove NORTHERN TELECOM RESTRICTED information 

from company premises unless there is a definite need. If 
you must remove such information, obtain your manager's 
approval prior to removing the information. 
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Giving such a document the same protection as it has on com- 
pany premises might, for example, mean locking it in your 


desk at home, or keeping it on your person while travelling. 


2.1.5 Transmission 


Remember that telephones, TWX, telex, telecopiers, and com- 
municating word processors are not always secure means of 
communication. Do not use these to transmit classified 
proprietary information unless the use of this equipment 


has been cleared through your security manager. 


A secure transmission network links certain Northern Telecom 
locations in North America and elsewhere. Contact your secur- 
ity manager for details. 


Obtain positive identification of the caller, before 
disclosing proprietary information over the telephone. 


2.1.6 Conference Phone Calls 


Remember that conference phone calls can be sources of 
information leaks. Audio and voice volume should be 
controlled to a level that will eliminate disclosure. 


2.1.7 Data Password Protection 


Passwords are used to control access to computer based data 
e.g. distributed data and word processing terminals, Display- 
phones, etc. Access to these systems should be on a need- 
to-know basis. 


Passwords should be kept secret and changed frequently and 
should not be obvious, such as locations, department names, 
phone numbers, etc. 
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If an employee is reassigned, transferred or terminated, it 
is the manager's responsibility to cancel the need-to-know 


authorization and the password. 


2.2 CONTROL OF DISCLOSURE TO OTHER EMPLOYEES 
2.2.1 Distribution 
° Extent Of Distribution 


Prior to distribution, determine, in conjunction with your 
manager, the extent of distribution to be made to permanent 
employees of information which you classify as NORTHERN 
TELECOM RESTRICTED information. The concept of need-to- 
know is applicable, 


° Preparation For Distribution 


You must ensure that classified proprietary information 

is prepared for distribution with the appropriate security 
cover sheets, markings, and packaging. See SECTION FIVE, 
Part 3.0 PREPARATION FOR DISTRIBUTION. 


° Method of Distribution 
The method of distribution of classified proprietary 


information is outlined in SECTION FIVE, Part 2.2.1, 
DISTRIBUTION. 
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° Updating the Register 


If you receive proprietary information classified as 
NORTHERN TELECOM PRIVATE, ensure that this is recorded 
in the register. See SECTION FIVE, Part 1.3, REGISTRA- 
TION. 


° Prohibitions 


Do not disclose to other permanent employees classified 


proprietary information which you did not classify. 


Do not disclose classified proprietary information to 
temporary employees. 


Do not disclose unclassified proprietary information 


except to those employees with a need to know such informa- 
tion in order to do their jobs. 


° Meetings, Conferences, and Seminars 


If you are acting as a chairperson at a meeting, confer- 
ence, Or seminar where classified proprietary informa- 

tion will be discussed, inform the participants at the 
beginning of the meeting of the classification of the 
meeting, conference, or seminar. All participants will 
sign a registration log which you will keep as part of the 
meeting records. All materials distributed must bear the 
appropriate security cover sheet and markings. If the 
information is NORTHERN TELECOM PRIVATE, you must 

ensure that the relevant details about its distribution are 


recorded in the register. 
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fe 


Off-site Meetings, Conferences, etc. 


If you are a principal in convening a company meeting to be 
held at a location other than the corporation's and 
classified proprietary information may be discussed, 

ensure that the off-site facility and security provisions 


are approved, in advance, by the local security manager. 


2.2.2 Reproduction 


Do not reproduce or request to be reproduced classified 
proprietary information. Should you require additional 
copies, obtain these from the originator of the 
classification. 


2.2.3 Storage 


Store NORTHERN TELECOM PRIVATE information in a steel 
filing cabinet with welded seams and equipped with a steel 
locking bar and an Abloy, model 3041, key-type padlock. 
Store NORTHERN TELECOM RESTRICTED information in a locked 
container such as a desk drawer, filing cabinet, etc. 


Strictly control access to keys. Grant access to the keys 
only to the classified document custodian and an absolute 
minimum number of employees who have a need to know the 
information. 


Keys providing access to classified proprietary informa- 
tion should be stored in a steel filing cabinet with welded 
seams and equipped with a steel locking bar and an Abloy, 
model 3041 key-type padlock. The key for this key storage 
cabinet should be retained on one's person. 


2.2.4 
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Lock your office door during coffee breaks, lunch break, or 
other short absences. Remember that locking your door does 


not constitute adequate security during nonworking hours. 


If you work in an open area, do not leave classified prop- 
rietary information on your desk or work surface during 


coffee breaks, lunch breks, or other absences. 


Destruction 


Once you declassify NORTHERN TELECOM PRIVATE or NOR- 

THERN TELECOM RESTRICTED information, retain or destroy it, 
depending on its continuing value to the corporation's busi- 
ness; destroy by shredding or burning. Record the destruc— 
tion of NORTHERN TELECOM PRIVATE information in all 
registers. The security cover sheets is to be filed in 

the register for audit purposes, 


CONTROL OF DISCLOSURE TO CONTRACTING PARTIES 


Do not disclose classified proprietary information to a 
party with whom Northern Telecom contracts without: 


° the approval of the originator of the classification 


° the signing of a non-disclosure agreement by the contract- 
ing party, prior to disclosure. This agreement shall be 


equivalent in form and content to the example in SECTION 
SIX. 
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Do not disclose unclassified proprietary information to a 
contracting party without: 


the approval of the department manager who has jurisdiction 


over the type of information to be disclosed. 


the signing of a non-disclosure agreement by the contract- 
ing party, prior to disclosure. The agreement shall be 
equivalent in form and content to the example in SECTION 
SIX. 


CONTROL OF DISCLOSURE TO GOVERNMENTS 


Do not disclose classified proprietary information to a 
government without the prior approval of the originator of 
the classification. Governments do not recognize the cate- 
gories NORTHERN TELECOM PRIVATE and NORTHERN TELECOM 
RESTRICTED; therefore, such information must be marked, 
prior to disclosure to the government, in such a way as to 
ensure the maximum protection possible under Freedom of 
Information or Access to Information legislation. See SEC- 
TION SIX, SAMPLE FORMS, for stamp specimen. Contact the 


Northern Telecom Law Department for assistance. 


Treat unclassified proprietary information in the same 

way as classified proprietary information, but obtain 
approval, prior to disclosure, from the department which has 
functional jurisdiction over the type of information to be 
disclosed. 
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2.5 CONTROL OF DISCLOSURE TO OTHERS 


2.5.1 General Rules 


Channel any disclosure of classified proprietary informa- 
tion to the Board of Directors of the corporation through 


the corporate secretary. 


Do not disclose classified proprietary information to 
others. 


Do not disclose unclassified proprietary information to 
others without the prior approval of the department having 
£unctional jurisdiction over the type of information to be 
disclosed. 


2.5.2 The External News Media 


Should you be contacted by letter, telephone, or in person by 
anyone seeking information about Northern Telecom, refer the 
person to your senior manager who will request assistance 
from the corporate or public relations department. 


2.5.3 Northern Telecom Internal Publications 
Respond to requests from company publications for the 
disclosure of proprietary information under the rules 


applicable to disclosure to others as in SECTION FOUR, 
Part 2.5.1, GENERAL RULES. 


2.5.4 Papers (Articles, Technical Papers, Written Speeches) 


Do not disclose any classified proprietary information in 
any article, paper, or speech. 
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You may disclose unclassified proprietary information in 

a paper provided that you obtain in writing, prior to 
disclosure, the approval of your immediate manager. Submit 
to your immediate manager, at least six weeks in advance of 
the date of the proposed release a copy of the paper anda 
written memorandum containing the following information: 

° an outline of the presentation 
° the date of the presentation 


° the name of the publication or nature of the audience. 


Once a paper has been approved, do not make changes without 


submitting them for approval, as above. 


If a paper is approved for oral presentation only, do not 
distribute copies outside the corporation. 


Panel Discussions and Informal Speeches 


Do not disclose any classified proprietary information in 
a panel discussion or informal, unwritten speech. 


At least six weeks prior to participation in a panel 
discussion, or prior to giving a speech as a Northern Telecom 
employee, you must obtain approval in writing from your 
immediate manager. Submit to your immediate manager a 


written memorandum with the following information: 


° an outline of the discussion or speech 
° the date of the presentation, and 


° the nature of the audience. 
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CLASSIFICATION 


As a secretary or other management support staff, you are 
likely to handle proprietary information. Since some of 
this information may be classified proprietary 

information, you have an important responsibility to ensure 
that it is handled correctly. 


INITIAL CLASSIFICATION 


Officers (senior managers of the corporation) are responsible 


for classified proprietary information and have the auth- 
ority to classify proprietary information as either 
NORTHERN TELECOM PRIVATE or NORTHERN TELECOM RES- 
TRICTED. 


Managers are responsible for classified proprietary inform- 
ation and have the authority to classify proprietary 
information as NORTHERN TELECOM RESTRICTED and, if 
delegated to do so by an officer in jurisdiction, as NORTH- 
ERN TELECOM PRIVATE. This delegation will be authorized on 


delegation of authority form 72-102, which requires review 
and renewal at least annually. 


Professionals are responsible for classified proprietary 
information and have the authority to classify proprie- 
tary information as NORTHERN TELECOM RESTRICTED. 
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CLASSIFIED DOCUMENT CUSTODIAN 


A person in your department will be designated by your mana- 
ger as classified document custodian. This person will 

be responsible for safekeeping, handling and controlling 
classified proprietary information as outlined in this 
handbook. 


The department manager will maintain an up-to-date list of 
permanent employees (internal and external to the department) 
with need-to-know access to specific proprietary infor- 
Mation. This list will be provided to the classified 
document custodian for purposes of disclosure and distribu- 
tion of proprietary information. 


The custodian's responsiblities will include: 


maintaining classified document files 

assigning document control numbers 

preparing and maintaining registers and inventories 

° obtaining classification approvals 

controlling key(s) to classified files 

maintaining a list of employees with authorized access 
to files 


REGISTRATION 


A register must be kept for proprietary information 
classified as NORTHERN TELECOM PRIVATE. This register 

must contain details of all NORTHERN TELECOM PRIVATE 
information classified as such by an officer or your manager 


or received by him/her or others in your department. 
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change the markings on your copy of the document to the 
markings applicable to NORTHERN TELECOM PRIVATE 


information. See SECTION FIVE, Part 3.1, SECURITY COVER 
SHEETS. 


If you receive a new security cover sheet indicating the 


upgrading of a document, you must: 


° 


amend the register 
replace the old security cover sheet with the new one 
mark the document in accordance with the markings 


applicable to NORTHERN TELECOM PRIVATE. See SECTION 
FIVE, Part 3.1, SECURITY COVER SHEETS. 


DOWNGRADING AND DECLASSIFICATION 


Your Manager may decide from time to time to downgrade 
proprietary information which he/she orginally classified 
as NORTHERN TELECOM PRIVATE to NORTHERN TELECOM 
RESTRICTED or may decide to declassify NORTHERN TELECOM 
PRIVATE or NORTHERN TELECOM RESTRICTED information. 


When NORTHERN TELECOM PRIVATE information is reclassified 
as NORTHERN TELECOM RESTRICTED, you must: 


° 


amend the register accordingly 


° prepare new security cover sheets and instructions. See 


SECTION FIVE, Part 3.1, SECURITY COVER SHEETS. 
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distribute the new security cover sheets and instructions 
for NORTHERN TELECOM RESTRICTED information to the 


employees on the distribution list 


change the markings on your copy of the document to 
markings applicable to NORTHERN TELECOM RESTRICTED. 
See SECTION FIVE, Part 3.1, SECURITY COVER SHEETS. 


If you receive a new security cover sheet indicating the 
downgrading of NORTHERN TELECOM PRIVATE information to 
NORTHERN TELECOM RESTRICTED, you must: 


° amend the register 
° replace the old security cover sheet with the new one 


° mark the document with appropriate markings. See SECTION 
FIVE, Part 3.1, SECURITY COVER SHEETS. 


If your Manager decides to declassify classified proprie- 
tary information you must: 


° amend the register in the case of NORTHERN TELECOM 
PRIVATE information; 


° remove the security cover sheet from the document (master 
and copies) in your files and file the cover sheets with the 


written notice to support the action in your register. 


° send written notice of the declassification to the emp- 
loyees on the distribution list 


° line through the old classification markings. 
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If you receive written notice of declassification from 
another employee, you must: 


° 


amend the register in the case of NORTHERN TELECOM 
PRIVATE information 


remove the security cover sheet from the document (master 
and copies) in your files and file the cover sheets with 


the written notice to support the action in your 
register. 


line through the old classification markings. 


CONTROL OF DISCLOSURE 


GENERAL REMINDERS 


Clean Desk Policy 


The corporation subscribes to a clean desk policy. At the 
end of the day, clear all classified proprietary informa- 


tion documents from your desk, table, credenza, etc. and 
lock it up. 
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2.1.2 Loose Talk 


It is very human to discuss one's work with others. The 
problem is to know when to stop short of unauthorized 
disclosure of proprietary information. If you work with 
proprietary information be sensitive to the things you 

say in public places. Industrial espionage agents rely 
heavily on the fact that people love to talk about their work 
- in elevators, lunchrooms, restaurants, airplanes, buses, 


trains, at social events, sporting events, etc. 


Disclose travel plans and work calendars only to those who 
need to know the information. Confirm travel arrangements as 


close to the date of departure time as practical. 
2.1.3 Removal from Premises 


Do not remove NORTHERN TELECOM PRIVATE information from \ 
company premises except in emergencies or when there is no 
alternative. If you must remove such information, get 

approval from your department manager and make sure your 
department's register of NORTHERN TELECOM PRIVATE 

information is annotated accordingly. 


Leave a detailed receipt with the classified document 
custodian. If you are the classified document custodian, 
this receipt must be left with your manager. This will be 
returned to you when you return the document or otherwise 


account for it. 


Give this proprietary information the same degree of 
protection when it is off company premises as it is given 
while on company premises. While travelling, for example, 
this might mean carrying the document with you at all times 


or depositing it in a hotel safe. a 
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Do not. remove NORTHERN TELECOM RESTRICTED information 
from company premises unless there is a definite need. 


Giving such a document the same protection as it has on 
company premises might, for example, mean locking it in your 


desk at home, or keeping it on your person while travelling. 
2.1.4 Transmission 


Remember that telephones, TWX, telex, telecopiers, and 
communicating word processors are not always secure means of 
communication. Do not use these to transmit classified 
proprietary information unless the use of this equipment 

has been cleared through your local security manager. 


A secure transmission network links certain Northern Telecom 
locations in North America and elsewhere. Contact your 
security manager for details. 


Obtain positive identification of the caller, before 


disclosing proprietary information over the telephone. 
2.1.5 Conference Phone Calls 


Remember that conference phone calls can be sources of infor- 
mation leaks. Audio and voice volume should be controlled to 
a level that will eliminate disclosure. 


2.1.6 Data Password Protection 


Passwords are used to control access to computer based data 
e.g. distributed data and word processing terminals, Display- 


phones, etc. Access to these systems should be on a need- 
to-know basis. 
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Passwords should be kept secret and changed frequently and 
should not be obvious, such as locations, department names, 
phone numbers, etc. 


If an employee is reassigned, transferred or terminated, it 


is the manager's responsibility to cancel the need-to-know 
authorization and the password. 


DISCLOSURE TO OTHER EMPLOYEES 


2.2.1 Method of Distribution 


The distribution of NORTHERN TELECOM PRIVATE information 
shall be carried out in one of the following ways: 


° internal to location - hand delivered 
° external to location - registered government mail or 


registered courier service 


The distribution of NORTHERN TELECOM RESTRICTED 


information shall be carried out in one of the following 
ways: 
° internal to location - company mail 
° external to location - company mail or 
government mail or 


registered courier service. 


Due to the importance of classified proprietary informa- 
tion, it is good practice for you to follow up the distri- 
bution of this information to see if it has arrived at the 
destination(s), within a reasonable time period. If this has 
not arrived, see SECTION ONE, Part 5. 
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The use of taxis for transmittal of classified proprietary 
information is not recommended. However, taxis may be used 
when no other alternative means of transportation is avail- 
able. In these instances, it will be your responsibility to 
verify that the material is received promptly and intact at 
the destination by the recipient. 


2.2.2 Extent of Distribution 


The distribution of classified proprietary information 

will be determined by your manager or a departmental profess- 
ional in conjunction with your manager. The concept of 
need-to-know is applicable. 


2.2.3 Preparations for Distribution 


The details on preparations of classified proprietary 
information for distribution are given in SECTION FIVE, 
Part 3.0, PREPARATIONS FOR DISTRIBUTION. 


2.2.4 Prohibitions 


Do not disclose to other permanent employees classified 
proprietary information except to those employees listed on 
the need-to-know list. 


Do not disclose classified proprietary information to 
temporary employees. 


Do not disclose unclassified proprietary information 
except to those employees with a need to know such 
information in order to do their jobs. 
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2.2.5 Need-to-Know 


An approved list of permanent employees with specific 


need-to-know is kept by your classified document 
custodian. See SECTION FIVE, Part 1.2, CLASSIFIED 
DOCUMENT CUSTODIAN. 


2.2.6 Reproduction 


You must not reproduce or photocopy classified proprietary 
information. Should someone ask you for additional copies 
of information which your manager classified, the procedure 
outlined in SECTION 3.0, PREPARATION FOR DISTRIBUTION, must 
be followed to preserve the colour coding concept and, if 
applicable, the register for NORTHERN TELECOM PRIVATE 
information must be updated. 


If your manager or department staff request additional copies 
of classified proprietary information which they received 
from the orginator of the classification, you must obtain 
such additional copies from the originator of the 
classification. 


Zol2eT7 Storage 


When not in use, NORTHERN TELECOM PRIVATE information 

must be stored in a steel filing cabinet with welded seams, 
and equipped with a steel locking bar and an Abloy, model 
3041, key-type padlock. When not in use, NORTHERN TELECOM 
RESTRICTED information must be stored in a locked container 
such as a desk drawer, filing cabinet, etc. 


1l 


( ) 


os 
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File folders, hanging files, etc., containing classified 
proprietary information are to be marked with the security 


Classification of their contents. 


Keep in mind that floppy disks for word processors, dictation 
tapes, shorthand notes, etc. all have the same classification 
as the final product and must be protected accordingly. 


Access to keys must be rigidly controlled, usually by the 
"custodian" and only available to an absolute minimum number 
of employees who have been designated by your Manager as 


having a need-to-know the information. 


Keys providing access to classified proprietary information 
should be stored in a steel filing, cabinet with welded 
seams and equipped with a steel locking bar and an Abloy, 
model 3041 key-type padlock. The key for this key storage 
cabinet should be retained on one's person. 


Classified proprietary information must not be left on 
your desk during coffee breaks, lunch break, and other 
absences, 


2.2.8 Contingency Storage 


Ensure that a back-up, contingency file of classified 
proprietary information is stored at an approved off-site 
location. 


It is not necessary to duplicate all classified proprietary 
information if access to other copies of this information 


can be assured. 


SECTION FIVE - SECRETARIES/OTHER MANAGEMENT SUPPORT STAFF 


2.2.9 Destruction 


3.0 


3.1 


Once NORTHERN TELECOM PRIVATE or NORTHERN TELECOM 

RESTRICTED information is declassified, it can be retained 

or destroyed depending on its continuing value to the corpor- 
ation's business. You should obtain instructions from your 
Manager as to destruction or retention. Destruction must be 


accomplished by shredding or burning. 


Destruction of a NORTHERN TELECOM PRIVATE information 

must be appropriately indicated in the register. Remove 

the security cover sheet from the document and file it along 
with the written notice to support the action in the 
register. 


In the event that you are required to destroy a large volume 
of material, consult the security manager at your location 
for advice regarding bulk destruction. 


PREPARATION FOR DISTRIBUTION 


Security Cover Sheets 


NORTHERN TELECOM PRIVATE or NORTHERN TELECOM RESTRICTED 
security cover sheets must be affixed on top (outside) of 
documents so classified. Aside from the important informa- 
tion which must be entered on these security cover sheets, 
they function as a "flag" to ensure proper handling and 
prevent unauthorized visual access. In addition, they 
provide important information that permits downgrading and/or 
declassification of information no longer requiring the 


protection of classification. 


i3 
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The security cover sheets are colour coded as follows: 


Red - NORTHERN TELECOM PRIVATE 
Blue - NORTHERN TELECOM RESTRICTED 


Security cover sheets must not be reproduced since this would 


defeat the advantage of colour coding. 
Fill in all information required on the security cover sheet. 
The document control number required by the NORTHERN 


TELECOM PRIVATE security cover sheet is composed of the 
following elements: 


037 - 0273 - Oo1 - 005 
Facility Originating 

Location Department Sequence Copy 
Code Number Number Number 


The facility location code is a numeric designation 
assigned to each location in the corporation and can be 
obtained from your location's Human Resources Department. 


The originating department number is a self-explanatory - 
four-digit number. 


The sequence number is a sequential number, starting with 
001, assigned to a NORTHERN TELECOM PRIVATE document by 

the originating department. The first PRIVATE document 
originated by a given department would be assigned sequence 
number 001; the second 002 and so forth. 


3.2 
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° The copy number is is a sequential number, starting with 
001, assigned to multiple copy documents and to the 
original and subsequent copies of a NORTHERN TELECOM 
PRIVATE document. 


Example: If a department made 5 copies of the same 
document, they would be numbered 001, 002, 003, 
004, and 005. The original of a document is 
always copy 001. 


The name of the person classifying the document must be typed 
in the "Classified By:" block of the security cover sheet. 


Obtain instructions from your manager as to the downgrading 
and declassification schedule. 


Stationery 


The stationery used for classified proprietary informa- 
tion must bear the appropriate classification and, in the 
case of NORTHERN TELECOM PRIVATE information, must also 
bear the document control number as outlined in the previous 
subsection. Preprinted stationery is available and samples 
are shown in SECTION SIX, SAMPLE FORMS. 


Security classification markings NORTHERN TELECOM PRIVATE 
Or NORTHERN TELECOM RESTRICTED are to be printed or 
stamped (not typed) in bold face, on each page of a 
classified document as follows: 


ia 


3.3 


3.4 


SECTION FIVE - SECRETARIES/OTHER MANAGEMENT SUPPORT STAFF 


Front Back First Last All 
Cover Cover Page Page Pages 


Books ~ securely bound Xx Xx X Xx 

Books - Cerlox binding x Xx X 
Stapled Pages x X Xx 
Computer Printouts X 


See SECTION SIX, SAMPLE FORMS, for the approved stamps. 


Page Numbering 
Each page of document containing classified proprietary 


information is to be sequentially numbered at the bottom in 
accordance with the following example of a 3-page documents: 


1 of 3 


2 of 3 
3 of 3 


Packaging 


Classified proprietary information must be packaged in 


two envelopes, an inner and an outer, as follows: 


1) Inner Envelope - NORTHERN TELECOM PRIVATE 


° NORTHERN TELECOM PRIVATE (marked in accordance with 
the sample in SECTION SIX, SAMPLE FORMS); 
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° correct name and address of the recipient me 
correct name and address of the sender 

° TO BE OPENED ONLY BY ADDRESSEE 

Once the envelope has been sealed, the sender's 


signature is to appear vertically across the flap and is 
to be covered with transparent tape. 


2) Inner Envelope - NORTHERN TELECOM RESTRICTED 


° NORTHERN TELECOM RESTRICTED marked in accordance 
with the sample in SECTION SIX, SAMPLE FORMS 


correct name and address of the recipient 
° correct name and address of the sender 


° TO. BE OPENED ONLY BY ADDRESSEE OR DELEGATE, 


3) Outer Envelope - Both NORTHERN TELECOM PRIVATE and 


NORTHERN TELECOM RESTRICTED 


° correct name and address of the recipient 


° correct name and address of the sender 


° NO CLASSIFICATION MARKINGS ARE TO APPEAR ON THE OUTER 
ENVELOPE. 


( ) 
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correct name and address of the recipient 
correct name and address of the sender 

° TO BE OPENED ONLY BY ADDRESSEE 

Once the envelope has been sealed, the sender's 


signature is to appear vertically across the flap and is 


to be covered with transparent tape. 


2) Inner Envelope —- NORTHERN TELECOM RESTRICTED 


° NORTHERN TELECOM RESTRICTED marked in accordance 
with the sample in SECTION SIX, SAMPLE FORMS 


correct name and address of the recipient 
° correct name and address of the sender 


° TO BE OPENED ONLY BY ADDRESSEE OR DELEGATE. 


3) Outer Envelope - Both NORTHERN TELECOM PRIVATE and 
NORTHERN TELECOM RESTRICTED 


correct name and address of the recipient 
correct name and address of the sender 


° NO CLASSIFICATION MARKINGS ARE TO APPEAR ON THE OUTER 
ENVELOPE. 
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NOTES 


() 
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SECTION 


SIX -—- SAMPLE FORMS 


TABLE OF CONTENTS 


Delegation of Authority Form 72-102 


Security Cover Sheet - 
NORTHERN TELECOM PRIVATE - 29-001 


Security Cover Sheet - 
NORTHERN TELECOM RESTRICTED - 29-002 


Sample Register page 


Preprinted Stationery - 
NORTHERN TELECOM PRIVATE 


Preprinted Stationery - 
NORTHERN TELECOM RESTRICTED 


Rubber Stamp Specimens 


Preprinted Inner Envelope - 
NORTHERN TELECOM PRIVATE 


Preprinted Inner Envelope - 
NORTHERN TELECOM RESTRICTED 


Agreement Relating to Trade Secrets, Inventions 


and Proprietary Information 


Sample Corporate Non-Disclosure Agreeinent 


Northern Telecom 
Limited 


northern 
felecaim 


Northern Telecom 
Canada Limited 


f ‘Division, Plant, Organization/Division, Usine, Fonction 


Location/Etablissement 


Delegation of authority to/Délégation de pouvoir a 


Northern Telecom 
Limitée 


Northern Telecom 
Canada Limitée 


Date/Date 


Copies to 


Delegation of authority 
Deélégation de pouvoir 


Coptes 


Dept. no./Dép. n° 


Delegated responsibility 


Replacing delegation in favour of /En remplacement de la delegation a 


Approved /Approuve 


As per Admin Procedure 301 01/vorr directive 301 01 


Please type in full name of person approving and authorizing 


The above is a true copy 
of the original 
delegation on file in 
department 


Certified /Certifie 


In accordance with the provistons of Administrative 
Procedure 301 01, the following sections are to be 
completed when the above delegation ts either ‘‘cancelled’’ 
or is to be “reinstated”’ for a further period not to exceed 


(3) years 
w 


Delegation to 
be reinstated 


Remise en vigueur 
de la délégation 


Date/Date 


Approved/Approuvé 


72-102 (11-79) 


(At the original authorizing leve!)/{Au niveau d autorisation d origine) 


Dated /Date 


Authorized for issue 
Permission d‘émettre 
Controler/Contrdéleur 


Inscrire au long le nom de la personne qui approuve et autorise 


Ci-dessus se trouve 

une copte conforme 

de la délégation originale 
du dossier dans le dep 


Conformément 4 la directive 301.01, (Administrative 
Procedure), 1| faut remplir les espaces suivants si la 
delegation est annulee ou remise en vigueur pour 
une duree maximum de 3 ans 


Annulation de 
la délégation 


Delegation 
is cancelled 


Date/Date 


Signature/Signature 


northern Security cover sheet 
telecom Page de garde de sécurité 


private 


strictement 
reserve 


Document 


Subject 
Sujet 


Document Control No. 
No de contréle du document 


Classified by 
Classifié par 


Downgrade to 
Déclasser a 


Declassify on 
Déclassifier le 


Exempt from Downgrading or Declassification 
Exempt de déclassement ou de déclassification 


Handling instruction in brief - 
Directives générales 


@ Affix this cover sheet to all NORTHERN TELECOM PRIVATE documents 
Joindre cette page de garde a tous les documents de NORTHERN TELECOM portant la mention 
STRICTEMENT RESERVE. 


@® Complete all necessary information in above blocks. 
Remplir les cadres ci-dessus sans rien omettre. 


@ Store this document only in approved containers. 
Ranger ce document uniquement dans un classeur approuvé. 


@® Record document origination, distribution and receipt on ‘‘Register of Northern Telecom Private 
Information”’. 
Dans le “Registre des renseignements strictement réservés’ de Northern Telecom, inscrire 
les détails de provenance, de distribution et de reception du document. 


® Transmit internally by handcarrying; externally by registered mail. 


Acheminer, a I'intérieur de l’entreprise, par courrier interne et a |‘extérieur, par courrier 
recommandé. 


® Double wrapping is required for transmittal. 
Acheminer les documents sous double pli. 


@ Destroy by shredding. 
Détruire par déchiquetage. 


@® Record date of destruction on ‘Register of Northern Telecom Private Information”. 
Inscrire la date de destruction dans le ‘Registre des renseignements strictement réservés de 
ii Northern Telecom”. 


@ Reproduction must be approved in writing by originator or Company Officer. 
Toute reproduction doit étre approuvée par écrit par |’auteur ou par les personnes autorisées. 


Note: Consult Administrative Procedure 205.04 for details. 
Pour plus de renseignements consulter le reglement administratif 205.04. 


SS SS 
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oo, 


Eee 
restricted 


reserve 


Document 


Subject 
Sujet 


Classified by 
Classifié par 


Declassify on 
Déclassifier le 


Exempt from Downgrading or declassification 
Exempt de déclassement ou de déclassification 


i. Handling instructions in brief 
Directives générales 


@ Affix this cover to all NORTHERN TELECOM RESTRICTED documents 
Joindre cette page de garde a tous les documents de NORTHERN TELECOM portant la mention 
RESERVE 


@® Complete all necessary information in above blocks 
Remplir les cadres ci-dessus sans rien omettre 


@® Store this document in an approved container 
Ranger ce document dans un classeur approuvé 


@® Transmit internally by company mail; externally by regular or registered mail. 
Acheminer a I’intérieur de l’entreprise par courrier interne et a |’extérieur par courrier ordinaire 
ou recommandé. 


@ Double wrapping is required for external transmittal. 
Acheminer les documents a |’extérieur sous double pli. 


@® Destroy by shredding. 
Détruire par déchiquetage. 


Note: Consult Administrative Procedure 205.04 for details. 
Pour plus de renseignements consulter le reglement administratif 205.04. 
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31-141(10-77) 


nerthern 
felecom 


In consideration of my employment respectively and collectively 
by Northern Telecom Limited or Northern Telecom Canada Limit- 
ed (hereinafter called the Company ) . 


| hereby affirm and represent that | am under no obligation to 
any former employer which is in any way inconsistent with this 
agreement or which imposes any restriction on my activities on 
behalf of the Company. 


All inventions or discoveries relating to any matter or thing with 
which the Company’s business !s directly or indirectly concerned, 
which | may make or conceive while employed by the Company, 
whether during or after working hours, whether alone or with 
others, are the property of the Company, to which the same are 
hereby assigned; and | hereby undertake to make prompily a full 
disclosure thereof to the Company, and to execute all such docu- 
ments during the period of my employment and thereafter as may 
be required, to enable the Company to apply, in its name, for let- 
ters patent in all countries of the world. 


1 shall not, at any time during or following my employment with 


“~ the Company, disclose to any person other than authorized offi- 


cers or personnel of the Company or authorize the disclosure of 
any trade secret or proprietary information relating to any activity 
of the Company or any inventions or discoveries which may belong 
to the Company. 


I further agree that all models, instructions, drawings, notes, 
memoranda or other writings made by me or which may come into 
my possession while employed by the Company and which relate 
in any way to or embody any trade secrets, proprietary, Company 


Private or Restricted information concerning any activity of the 
Company, shall be the exclusive property of the Company and shall 


be kept on the Company’s premises except when required else- 
where in connection with any activity of the Company and | 
further agree that | shall not at any time during or following my em- 
ployment disclose such information to any person other than auth- 
orized officers or personnel of the Company . 


Acknowledgement 


Applcant’s signature hereunder indicates understanding and ac- 
ceptance of the above conditions of employment and acknowl- 
edges receiving a copy of these conditons. 


Applicant's 
Signature 


Da.e 


(To be signed and dated when filling out form) 


Agreement relating to trade secrets, inventions 


and proprietary information. 


Engagement relatif aux inventions, 
aux secrets industriels et a l'information 
protégée par des droits de propriété. 


Eu égard a l'emploi qui m’a été confirmé par Northern Telecom 
Limitée ou par Northern Telecom Canada Limitée (dénommeées ci 
-aprés la Compagnie), ou par les deux, 


Je certifie que je suis libre vis-a-vis de mes anciens employeurs 
de toutes obligations incompatibles avec le présent engagement 
ou susceptibles de faire obstacle a |’'exercice de mes fonctions 
pour le compte de la Compagnie; 


Je céde, par les présentes, 4 la Compagnie qui en acquiert de 
ce fait la propriété, toute invention ou découverte dont l'objet se- 
ra directement ou indirectement relié & son activité, et que j’aurai 
congue, seul ou en collaboration, durant mes heures de travail ou 
a tout autre moment, pendant !a durée de mon emploi dans la 
Compagnie. Je m’engage, en outre, 4 communiquer sans délai a 
la Compagnie tous renseignements se rapportant 4 une telle in- 
vention ou découverte, et a signer, pendant la durée de mon em- 
ploi et ultérieurement, le cas échéant, les documents requis pour 
lui permettre de déposer en son nom des demandes de brevets 
dans n'importe quel pays du monde. 


Pendant la durée de mon emploi dans la Compagnie et ultérieu- 
rement, je m‘oblige 4 ne communiquer a quiconque (sauf aux diri- 
geants de la Compagnie et aux membres de son personnel diment 
mandatés) des secrets indusiriels ou des renseignements proté- 
gés par des droits de propriété et relatifs 4 son activité, ou des 
inventions ou découvertes qui sont sa propriété, et je m’engage 
a refuser 4 quiconque I'autorisation de les divulguer. 


Je reconnais également que les modéles industriels, spécifi- 
cations, dessins, notes, mémortres et autres documents réalisés 
ou rédigés par moi ou susceptibles de se trouver en ma posses- 
sion pendant la durée de mon emploi dans la Compagnie et qui con- 


stituent ou concernent des secrets industriels, des renseignements 
privés secrets ou réservés sur une activite quelconque de la Com- 


pagnie sont la propriété exclusive de la Compagnie et ne doivent 
pas sortir de ses établissements, sauf si en raison d'une telle activité 
leur présence est requise dans un autre lieu Je m’engage en outre 
a ne communiquer ces renseignements a quiconque, excepté aux 
dirigeants de la Compagnie ou aux membres accrédités de son 
personnel, que ce soit durant mon emploi dans la Compagnie ou 
ultérieurement. 


Acceptation 


Par sa signature apposée ci-dessous, le postulant confirme qu'il 
accepte les conditions précitées dont il reconnait avoir pris con- 
naissance, et accuse réception d'une copie du présent engage- 
ment. 


Signature 
du_postulant 


Date 


{Signer et dater aprés avoir rempli la demande d’emploi) 


SAMPLE CORPORATE NON-DISCLOSURE AGREEMENT 


THIS AGREEMENT made as of the day of Z 

198 , 

BY AND BETWEEN: NORTHERN TELECOM a 
body corporate incorporated and 
existing under the laws of 
and having an office at 
("Northern Telecom"); 

AND 


a body corporate incorporated and 


existing under the laws of _ 
: and having an office at 


("Recipient"). 


WHEREAS, Northern Telecom and the Recipient are currently 


engaged in discussions with respect to: 


AND WHEREAS, the parties expect that such discussions will 
involve the written or oral disclosure and communication to the 
Recipient by Northern Telecom, its subsidiaries, or affiliates of 
proprietary and confidential information which may include 
financial data, business plans, personal information, drawings, 
samples, devices, demonstrations, trade secrets, and other data 
relating to ree ee 

_ (collectively and individually referred to as the 
"Information"); 


AND WHEREAS, the parties hereto wish to define their 
rights with respect to the Information and to protect the rights 
of Northern Telecom, its affiliates, and subsidiaries to such 


Information; 


THIS AGREEMENT WITNESSES that, in consideration of the 
above premises and the mutual promises herein, the parties agree 


as follows: 


ARTICLE 1 


lel Northern Telecom undertakes to provide, at its discretion, 
the Information to the Recipient for purposes of 


pe TS 


, subject to the terms, conditions, and 
understandings set forth herein. Nothing herein obligates 
Northern Telecom to disclose any particular data or 


information whether or not it is part of the Information. 


1.2 The parties shall designate in writing one or more persons 
in their organization as the only persons authorized to 


deliver or receive, as the case may be, the Information. 


1.3 The Information which has been or will be disclosed to the 
Recipient shall remain the exclusive property of Northern 
Telecom and all rights to the Information shall be held in 
trust by the Recipient for the benefit of Northern Telecom. 
The Recipient shall not deal with, use, or disclose such 
Information for any purpose except as described herein or 
unless and until expressly authorized in writing to do so 
by Northern Telecom. 


The Recipient shall disclose the Information only to those 
of its employees, agents, and consultants who shall have a 
"need-to-know" the Information for the purposes described 


herein. 


The Information shall not be mechanically copied or 
otherwise reproduced by the Recipient without the express 
prior written permission of Northern Telecom, except for 
such copies as the Recipient may require pursuant to this 
Agreement for internal evaluation purposes on a "need to 
know" basis. All copies shall contain, on reproduction by 
the Recipient, the same Northern Telecom proprietary and 
confidential notices and legends which appear on the 
original Information, unless expressly authorized otherwise 
by Northern Telecom prior to reproduction. 


The Recipient will not be liable for disclosure of the 


Information upon the occurrence of one or more of the 
following events: 


(a) the expiration of five years from the date of this 
Agreement first set out above; 


(b) the Information is generally known to the public 
other than through a breach of this Agreement: 


(c) the Information is lawfully obtained by the 
Recipient from a third party or parties without 
breach of this Agreement by the Recipient, as shown 


by documentation sufficient to establish the third 
party as a source of the Information; 


(d) the Information was known to the Recipient prior to 
disclosure by the Recipient, its affiliates, 
or subsidiaries, as shown by documentation sufficent 


to establish such knowledge; or 


(e) Northern Telecom has provided its prior written 


approval for such disclosure by the Recipient. 


ARTICLE 2 


No license under any patent, no copyright of Northern 
Telecom, or any right respecting the Information, other 
than expressly set out herein, is granted to the Recipient 
under this Agreement by implication or otherwise. This 
Agreement shall not constitute any representation, 
warranty, Or guarantee to the Recipient by Northern Telecom 
with respect to the infringement of patents or other rights 
of third parties. Northern Telecom, its affiliates, and 
subsidiaries, shall not be held liable for any errors or 
omissions in the Information or for the utilization and the 
results of utilization of the Information. 


ARTICLE 3 


The Recipient shall return all Information and copies 
thereof susceptible of being so returned to Northern 
Telecom upon the request of Northern Telecom or shall 
destroy such Information and copies, as directed by 


Northern Telecom, and furnish proof of their destruction. 


ARTICLE 4 


This Agreement shall be construed in accordance with and 


shall be governed by the laws of the 


ARTICLE 5 
No amendment to the terms and conditions of this Agreement 
shall be valid and binding on the parties unless made in 
writing and signed by an authorized representative of each 
of the parties. 
This Agreement shall enure to the benefit of and shall be 


binding upon the parties and their respective successors, 
assigns, subsidiaries, and affiliates. 


NORTHERN TELECOM 


By: 
By: 


Recipient 


By: 


By: 


